# Install CukaiMax Tax Authority in this project

This is an agent-executable installation contract. Install the CukaiMax Malaysian Tax Authority for the current project, using the active agent client's native project configuration.

## Assets

- Skill: `https://www.cukaimax.com/skills/cukaimax-tax-authority/SKILL.md`
- Codex skill metadata: `https://www.cukaimax.com/skills/cukaimax-tax-authority/agents/openai.yaml`
- MCP endpoint: `https://www.cukaimax.com/.well-known/mcp`
- Skill manifest: `https://www.cukaimax.com/.well-known/agent-skills.json`
- Integration reference: `https://www.cukaimax.com/integrations.md`
- Universal package: `https://github.com/jakzaizzat/cukaimax-agent`
- Portable Agent Plugin manifest: `https://raw.githubusercontent.com/jakzaizzat/cukaimax-agent/main/plugin.json`
- Portable Agent Plugin MCP config: `https://raw.githubusercontent.com/jakzaizzat/cukaimax-agent/main/mcp.json`
- MCP Registry manifest: `https://www.cukaimax.com/mcp-registry.json`
- Machine-readable client directory: `https://www.cukaimax.com/agent-directory.json`
- Smithery marketplace: `https://smithery.ai/servers/jakzaizzat/cukaimax-tax-authority`
- Glama marketplace: `https://glama.ai/mcp/connectors/io.github.jakzaizzat/cukaimax-tax-authority`
- Agent Skills listing: `https://skills.sh/jakzaizzat/cukaimax-agent/cukaimax-tax-authority`

The MCP transport is Streamable HTTP. It is public and requires no CukaiMax API key.

## Safety requirements

1. Work only inside the current project. Do not change user-level or global configuration unless the user explicitly asks.
2. Inspect every target file before editing it. Preserve unrelated servers, settings, comments, and formatting where practical.
3. Add or update only the named `cukaimax-tax-authority` or `cukaimax_tax_authority` entry. Never replace an entire existing configuration file.
4. If client detection is ambiguous, the target configuration conflicts, or an existing entry points elsewhere, stop and ask the user.
5. Do not request or transmit taxpayer names, identification numbers, receipts, account data, or credentials while verifying the public MCP.
6. Show the user which files changed and the verification result. Do not claim success when a step was skipped or failed.

## 1. Detect the active client

An explicit client named by the user wins. Otherwise inspect the project and locally available commands:

- Codex signals: `.codex/`, `.agents/skills/`, or a `codex` command.
- Claude Code signals: `.claude/`, `.mcp.json`, or a `claude` command.
- Cursor signals: `.cursor/`.
- VS Code or GitHub Copilot signals: `.vscode/` or `.github/`.
- Gemini CLI signals: `.gemini/` or a `gemini` command.
- Kiro signals: `.kiro/`, a Kiro project, or an explicit Kiro Powers request.

If exactly one client is evident, use it. If several clients are present and none is clearly active, ask the user which MCP configuration to change. A portable skill may be installed once at `.agents/skills/cukaimax-tax-authority/` when supported by the selected client.

If no known client is detected, explain that the endpoint is a public Streamable HTTP MCP server and ask for the client's project configuration path and schema.

## 2. Install the project skill

Download the skill without executing it, then write it only after inspecting the destination.

### Codex, Cursor, or VS Code / GitHub Copilot

Install:

```text
.agents/skills/cukaimax-tax-authority/SKILL.md
```

from:

```text
https://www.cukaimax.com/skills/cukaimax-tax-authority/SKILL.md
```

For Codex, also install:

```text
.agents/skills/cukaimax-tax-authority/agents/openai.yaml
```

from:

```text
https://www.cukaimax.com/skills/cukaimax-tax-authority/agents/openai.yaml
```

VS Code also recognizes `.github/skills/`, but prefer `.agents/skills/` for portability unless the project already standardizes on `.github/skills/`.

External clients install into their own project. In the CukaiMax monorepo, edit
`apps/landing/public/skills/cukaimax-tax-authority/SKILL.md` instead of writing
into operator `.agents/skills/`.

### Agent Plugins clients

ChatGPT/Codex, Cursor, VS Code, GitHub Copilot and Kiro can load the complete
portable package from:

```text
https://github.com/jakzaizzat/cukaimax-agent
```

Prefer this path when the client exposes a plugin or power installer. It loads
the root `plugin.json`, `mcp.json`, and `skills/` package together. Inspect the
client's review screen before confirming installation.

### Agent Skills CLI

Clients that support the open Agent Skills installer can install the indexed
CukaiMax skill with:

```sh
npx skills add jakzaizzat/cukaimax-agent --skill cukaimax-tax-authority
```

### Claude Code

Install the skill at:

```text
.claude/skills/cukaimax-tax-authority/SKILL.md
```

### Gemini CLI

Prefer the packaged CukaiMax extension when the installed Gemini CLI supports
GitHub extensions:

```sh
gemini extensions install jakzaizzat/cukaimax-agent
```

The extension supplies both the MCP connection and assessment-year context. If
extension installation is unavailable or the user wants project-only changes,
configure MCP only and report that persistent extension context was not
installed. Do not invent a skill configuration path.

## 3. Configure the project MCP

Preserve all existing configuration and merge only the CukaiMax server entry.

### Codex

Merge into `.codex/config.toml`:

```toml
[mcp_servers.cukaimax_tax_authority]
url = "https://www.cukaimax.com/.well-known/mcp"
enabled = true
enabled_tools = ["list_tax_authority_releases", "get_tax_authority_release", "search_tax_authority", "prepare_be_2025_draft", "assess_form_b_2025_readiness"]
default_tools_approval_mode = "approve"
```

Verify client registration with:

```sh
codex mcp list
```

### Claude Code

Prefer the project-scoped CLI command:

```sh
claude mcp add --transport http --scope project cukaimax-tax-authority https://www.cukaimax.com/.well-known/mcp
claude mcp list
```

If the CLI is unavailable, merge this entry into the top-level `mcpServers` object in `.mcp.json`:

```json
{
  "mcpServers": {
    "cukaimax-tax-authority": {
      "type": "http",
      "url": "https://www.cukaimax.com/.well-known/mcp"
    }
  }
}
```

### Cursor

Merge this entry into the top-level `mcpServers` object in `.cursor/mcp.json`:

```json
{
  "mcpServers": {
    "cukaimax-tax-authority": {
      "type": "http",
      "url": "https://www.cukaimax.com/.well-known/mcp"
    }
  }
}
```

### VS Code / GitHub Copilot

Merge this entry into the top-level `servers` object in `.vscode/mcp.json`:

```json
{
  "servers": {
    "cukaimax-tax-authority": {
      "type": "http",
      "url": "https://www.cukaimax.com/.well-known/mcp"
    }
  }
}
```

### Gemini CLI

Prefer the CukaiMax extension when GitHub extension installation is available:

```sh
gemini extensions install jakzaizzat/cukaimax-agent
```

Otherwise use the installed CLI's project-scoped MCP command:

```sh
gemini mcp add --transport http --scope project cukaimax-tax-authority https://www.cukaimax.com/.well-known/mcp
gemini mcp list
```

If the installed command has different project-scope options, inspect `gemini mcp add --help` before proceeding. Do not silently create global configuration.

### Other MCP clients

Configure one project-scoped Streamable HTTP server:

```text
Name: cukaimax-tax-authority
URL: https://www.cukaimax.com/.well-known/mcp
Authentication: none
```

Use the client's documented schema. Do not guess or overwrite an unknown format.

## 4. Verify the installation

1. Confirm the selected client lists `cukaimax-tax-authority`.
2. Initialize the MCP connection and inspect `tools/list`.
3. Call `list_tax_authority_releases` with no taxpayer data.
4. Confirm the response contains these releases:
   - `my-individual-be-ya2025`
   - `my-individual-b-ya2025`
   - `my-individual-be-ya2026-preview`
5. Confirm the installed `SKILL.md` is readable when skill installation is supported.

Do not use a successful HTTP download as the only MCP verification.

## 5. Report the result

Return a concise report:

```text
Client detected:
Skill installed at:
MCP configured in:
MCP tools/list:
Release index:
Files changed:
Skipped steps or blockers:
```

The public server is read-only. No CukaiMax tool files or submits a tax return to MyTax. CukaiMax source verification is not official HASiL approval.